Re: [Iptperl-general] Is IPTables::IPv4 Perl module trustable?

[Derrik P. <dp...@ds...>]

Bruno Negrão wrote:
> I'm asking this because i liked your module and i'd like to use it to make
> some programs to manage a big firewall i have in production here.
> Since this is an important machine, and your module is so "particular"(it
> uses C libraries that i don't understand and i don't know how to use or
> evaluate by myself) , i'm making a little research about it before start
> using it.

Understood. libiptc is a pretty complex piece of code. I don't know that 
my wrapper approaches its level of complexity, but it's all complicated.

> Do you have some advice about using your module in procuction machines?

You'd have to ask the people who are using it in production systems.

> Is your module compatible with all 2.4.x kernels?

To my knowledge. I personally am running 2.6.7 on my main daily-use 
systems (my office workstation and my PowerBook), but if a recent 
version of iptables works on the kernel, IPTables::IPv4 will as well.

> I read in its README file that it cleans all your firewall rules, make some
> tests, and then it loads all the rules again.
> It it really doing this? If so, i cant install it remotely neither in the
> business hours.

I'd suggest downloading the tarball and running 'perl Makefile.PL ; make 
; make install' then, instead of installing it using the CPAN shell. 
It's the 'make test' part that does that.

--
Derrik Pates
dp...@ds...